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A Class of Two-Weight and Three-Weight Codes 
and Their Applications in Secret Sharing 

Kelan Ding and Cunsheng Ding 


Abstract 

In this paper, a class of two-weight and three-weight linear codes over GF(/7) is constructed, and their 
application in secret sharing is investigated. Some of the linear codes obtained are optimal in the sense that 
they meet certain bounds on linear codes. These codes have applications also in authentication codes, association 
schemes, and strongly regular graphs, in addition to their applications in consumer electronics, communication and 
data storage systems. 


Index Terms 

Association schemes, authentication codes, linear codes, secret sharing schemes, strongly regular graphs. 


I. Introduction 

Throughout this paper, let p be an odd prime and let q = p'” for some positive integer m. An [n, k, d] 
eode C over GF(p) is a ^-dimensional subspaee of GF(/))" with minimum (Hamming) distanee d. Let A, 
denote the number of eodewords with Hamming weight i in a eode C of length n. The weight enumerator 

of C is defined by \-\-A\z-\-A 2 Z^ ^ -The weight distribution (l,Ai,... ,A„) is an important 

researeh topie in eoding theory, as it eontains erueial information as to estimate the error eorreeting 
eapability and the probability of error deteetion and eorreetion with respeet to some algorithms. A eode 
C is said to be a f-weight eode if the number of nonzero A, in the sequenee (Ai,A 2 , • • • ,A„) is equal to t. 

Let D = {d\, ^ 2 , ■ • •, dn} G GF(^). Let Tr denote the traee funetion from GF(^) onto GF(p) throughout 
this paper. We define a linear eode of length n over GF(/)) by 

Cd = {{Tr{xd\),i:r{xd2),...,Tr{xdn)) : a: G GF((5r)}, (1) 

and eall D the defining set of this eode Cd- 

This eonstruetion is generie in the sense that many elasses of known eodes eould be produeed by 
seleeting the defining set D C GF(( 2 '). This eonstruetion teehnique was employed in ifTSll and ifT^ for 
obtaining linear eodes with a few weights. 

The objeetive of this paper is to eonstruet a elass of linear eodes over GF(/)) with two and three nonzero 
weights using this generie eonstruetion method, and investigate their applieation in seeret sharing. Some 
of the linear eodes obtained in this paper are optimal in the sense that they meet some bounds on linear 
eodes. The linear eodes with a few weights presented in this paper have applieations also in authentieation 
eodes uni, assoeiation sehemes (Si, and strongly regular graphs |151, in addition to their applieations in 
eonsumer eleetronies, eommunieation and data storage systems. 
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II. The linear codes with two and three weights 

We only describe the codes and introduce their parameters in this section. The proofs of their parameters 
will be given in Section [Till 

In this paper, the defining set D of the code Cd of O is given by 

D = {xgGF(^)* :Tr(x2) =0}. (2) 

Theorem 1. Let m> I be odd, and let D be defined in ([2]). Then the set Cd o/(I2]) is a — 1,«^] code 
over GF(p) with the weight distribution in Tabled where A^, = 0 for all other weights w not listed in the 
table. 


TABLE I 

The weight distribution oe the codes oe TheoremQ 


Weight w 

Multiplicity A^, 

0 

1 


EJ 1 

7 

+ 


p»>-i_i 

(p-l)(p"--2+p^) 

7 

1 


Example 1. Let {p,m) = (3,5). Then the code Cd has parameters [80,5,48] and weight enumerator 
1+90^48+ 72^60. 

Theorem 2. Let m>2 be even, and let D be defined in (|2l). Then the code Cd over GF(p) o/ ([T]) has 
parameters 

•^1 , ^ / P~ 1 \2 m , ^ m—2 

and the weight distribution in Table |3 where = 0 for all other weights w not listed in the table. 


TABLE II 

The weight distribution oe the codes oe Theorem[2] 


Weight w 

Multiplicity A^, 

0 

1 

(p-l)p'”-2 

p'"-i (-i)(V)"f (p~ i)p¥ - 1 

{p~ 1) ) 

(p- 1) (p”'^' + (-1)^^^^?p^) 


Example 2. Let {p,m) = (5,4). Then the code Cd has parameters [104,4,80] and weight enumerator 
1 +520z*® + 104z^*^®. The best linear code of length 104 and dimension 4 over GF(5) has minimum 
weight 81. 

It is observed that the weights in the code Cd have a common divisor p — 1. This indicates that the 
code Cd may be punctured into a shorter one whose weight distribution can be easily derived from that 
of the original code Cd- This is indeed true and can be done as follows. 

Note that Tfiax^) = 0 for all a G GF(p) if Tr(v^) = 0. Hence, the set D of Q can be expressed as 

D = (GF(p)*)D = {ab:ae GF(p)* and b E D}, (3) 

where di/dj ^ GF(p)* for every pair of distinct elements di and dj in D. Then the code Cd is a punctured 
version of Cd whose parameters are given in the following two corollaries. 

Corollary 3. Let m> \ be odd, and let D be defined in (|5l). Then the set Cd o/(I2]) is a [(p'”~^ — \)/{p — 
l),m] code over GF(p) with the weight distribution in Table where = 0 for all other weights w 
not listed in the table. 
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TABLE III 

The weight distribution oe the codes oe Corollary[2 


Weight w 

Multiplicity A„ 

0 

1 




-1 

p"i-2 _|_p^ 

^(p"'-'-p^) 


Example 3. Let {p^m) = (3,5). Then the code Cq has parameters [40,5,24] and weight enumerator 
1 + + 12z^^. This code is optimal in the sense that any ternary code of length 40 and 

dimension 5 cannot have minimum distance 25 or more / |2^ . 


Corollary 4. Let m>2 be even, and let D be defined in di]). Then the code Qj over GF(/)) of ^ has 
parameters 


r -1 


^p 2 ,m 


P-1 

and the weight distribution in Table |70 where = 0 for all other weights w not listed in the table. 


TABLE IV 

The weight distribution oe the codes oe CorollaryE] 


Weight w 

Multiplicity A„ 

0 

1 

pm-2 

— ( — 1)(^)''?(p—1)/)^ ~1 

p'"-2 _ p^ 

(p_l)(p-"-i + (_l)(^)^fpA^) 


Example 4. Let {p^m) = (5,4). Then the code Cjj has parameters [26,4,20] and weight enumerator 
I +520z^*^ + I04z^^. This code is optimal due to the Griesmer bound. 

III. The proofs of the main results 

Our task of this section is to prove Theorems [T] and while Corollaries [3] and |4] follow directly from 
Theorems \T\ and [2l respectively. 

A. Some auxiliary results 

To prove Theorems [T| and |2l we need the help of a number of lemmas that are described and proved 
in the sequel. We start with group characters and Gauss sums. 

An additive character of GF(< 2 ') is a nonzero function % from GF(^) to the set of nonzero complex 
numbers such that x{x + y) = x{x)x{y) for any pair (x,y) G GF(^)^. For each b G GF(^), the function 

Xhic) = for all c G GF(^) (4) 

defines an additive character of GF(^), where £p = p when b = 0, Xo(c) = 1 for all c G GF(^), and 

is called the trivial additive character of GF(^). The character Xi in (HI) is called the canonical additive 
character of GF(^). It is known that every additive character of GF(^) can be written as %^(v) = Xi(£'t) 
[l24l Theorem 5.7]. 

Since the multiplicative group GF(^)* is cyclic, all the characters of the multiplicative group GF(^)* 
are given by 


X|;^.(a^) k = 0,l,--- ,^-2, 
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where 0 <j< q — 2 and a is a generator of GF(^)*. These \|/j are ealled multiplicative characters of 
GF(^), and form a group of order q—\ with identity element The eharaeter is ealled the 

quadratic character of GF(^), and is denoted by T] in this paper. We extend this quadratie eharaeter by 
letting ri( 0 ) = 0 . 

The Gauss sum G(ri,Xi) over GF(( 2 ') is defined by 

G(ri,%i)= Y. L (5) 

ceGF(g)* ceGF(9) 

and the Gauss sum G(fi,Xi) over GF(p) is defined by 

G(fi,xi)= Y iiW%i(c)= Y (6) 

ceGF(p)* ceGF(p) 

where fj and Xi are the quadratie and eanonieal additive eharaeters of GF(p), respeetively. 

The following lemma is proved in If24l Theorem 5.15]. 

Lemma 5. With the symbols and notation above, we have 


and 

G(ii.xi) = V^ " Vp- 

We will need the following lemma ll24l Theorem 5.33]. 

Lemma 6. Let % be a nontrivial additive character ofGF{q) with q odd, and let f{x) = a 2 X^ + a\x + aQ G 
GF(( 2 ')[v] with a 2 7 ^ 0. Then 

Y %(/W) =%(«o-«?(4a2)^^)ri(a2)G(ri,%). 

ceGF(9) 

The eonelusion of the following lemma is straightforward. For eompleteness, we provide a proof below. 

Lemma 1. If m> 2 is even, then Ti(y) = 1 for each y G GF(p)*. If m is odd, then ri(y) = fi(y) for each 
y G GF(p). 

q— 1 ■ 

Proof: Let a be a generator of GF(^)*. Notiee that every y G GF(p)* ean be expressed as a~f 
where 0 <i< p — 2. We have 

-—mod 2 = m mod 2 . 

p-\ 

Henee, every element y G GF(p)* is a square in GF(^) when m is an even positive integer, and ri(y) = fi(y) 
for eaeh y G GF(p) when m is odd. This eompletes the proof. ■ 

Below we prove a few more auxiliary results before proving the main results of this paper. 


Lemma 8. We have the following equality: 


E E 

yeGV{p)* xeGV{q) 

Proof: By Lemma we have 


0 if m odd, 

(_l)/n-l(_i)(^)2|(^ _ 1)^ (J- gygfj 


E E = E nw. 

veGF(p)*xeGF(^) yeGF{p)* 
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Using Lemma [7J we obtain 


L = 

veGF(p)* 


0 

p-\ 


if m odd, 
if m even. 


The desired conelusion then follows. 

The next lemma will be employed later. 

Lemma 9. For each a G GF(p), let 

Ha = |{v e GF(^) : Tr(x^) = a}\. 


Then 


^in—l 


p- 1 -fl(a)(-l)"T^(-l)("T^)^(^)p^ 


n—2 


= < 


(P—]-\2}n m—2 

— 


if m odd and a = 0, 
if m even and a = 0, 
if m odd and a 
if m even and a f^O. 


Proof: It follows from Lemma that 

1 


nr, = 


y{Tr{xf-a) 


^ya 


My^) 


= P 


- E E e, 

^xeGF(9)yeGF(p) 

+ “ E 

^ yeGF{p)* xeGF{q) 

'”-' + iG(ri,x,) £ e;”riW 

P yeG¥{p)* 

+ L^GF(p) * Tl (e) 

+ lPia)G{T],Xi)LzeGF{pr^lPiz) if a^O 

if m odd and a = 0, 


if a = 0 


p>n-i + P^G{y],Xi) 


ytri—l 

1 


-if. 


if m even and a = 0. 


p... . if m odd and a 7 ^ 0 , 




if m even and a 7 ^ 0 , 


where the first equality follows from the faet that LyeGF(p)%i(Ez) = 0 for every z e GF(p)*. The desired 
conelusion then follows from Lemma [51 ■ 

The following result will play an important role in proving the main results of this paper. 

Lemma 10. Let b G GF(^)*. Then 


EEL* 

yeGFfp)* zeGF(p)* xeGF(g) 

0 


,Tr(yx^+izx) 


= 


-ri(Tr(Z,2))(-l)( 




2 ) 2 (p — Ij^p 2 


\p-l)p 


m +1 




if m odd and TF{b^) = 0 , 
if m odd and TF{b^) 7 ^ 0 , 
if m even and Tr(Z 7 ^) = 0 , 
if m even and Trib^) 7 ^ 0 . 








Proof: It follows from Lemmas and | 7 ] that 


ILL* 

reGF(p)* zeGF(p)* xeGF(g) 


^li{yx^+bu) 


= G(ri,xi) ^ Xi 

)'eGF(p)*zeGF(p)* 


bh^ 
■ 43 ; 


T]iy) 


= G(ri,%i) ^ Y. Xi{-b^z^yi)r[ 

yieGF{p)* zeGF{p)* 

= G(ri,%i) Y L Xi{-b^z^yi)r[ 

yieGF(p)* zeGF{p)* 

= G(ri,%i) Y L Xi{-b^z^y)^iy) 

yeGF{p)* zC:GF{p)* 

-z^Tfbfy^ 


1 

4yi 


yi 


(2yi)^ 


= G(ri,xi) Y L 




)'eGF(p)*zeGF(p)* 


Xi) EzeGF(p)* EyeGF(p)* 11 (j) 


if Tv{b^) = 0 


G(Tl,Xi)i;j€GF(p)*E,€GF(,)*e/'"''’’N(-z"Tr(i2)j)ll(-Tr(i,2)) ifTr(i,2)^0 

G(ll,Xl)(p- IjEveGFO,)*^ W if Tr(A3 =0 

G(ll.Xl)Tl(-Tr(i>3)(p- 1)E,6 GFw 4’1W if Tr(A2) ^0 

0 if m odd and Tr{b^) = 0 , 

G(ri,%i)G(fl,%i)ri(-Tr(Z 72 ))(j 3 - 1 ) if m odd and Trlb^) ^0, 

G{r\,Xi){p — 1 )^ if m even and Tr(Z?^) = 0 , 

—G(ri,Xi)(/’— 1 ) if m even and TF(fP-) ^0. 

The desired eonelusions then follow from Lemmas [ 5 ] and |71 
The last auxiliary result we need is the following. 

Lemma 11 . For any b G GF(^)* and any a G GF(/)), let 

N{b) = |{x G GF(^) : Tr(x^) = 0 and Tribx) = 0 }|. 

Then 

' TxilP-) = 0, 


N{b) = < 


p'>^- 2 _fi(Tr(Z 72 ))(-l)(V) (^)(p_i)pV ifmoddandTT{b^)j^0, 
p '”“2 _ if m even and Tr{b^) = 0, 


„m ~2 


if m even and Triff) 0 . 


Proof: By definition, we have 


N{b) = p 


yTfxf 


zFx[bx) 


= P 


-2 


Jdbzx) 


xeGF{q) VveGF(p) 

Y L < 

zeGF(p)*x:eGF(9) 

■ Y L L * 

reGF(p)* 2eGF(p)* xeGF(5) 


.zeGF(p) 
-2 


+p ^ Y H ' 

y^GF{p)*x(,GF{q) 

Jdyx^+bzx) m-2 

--P +P 


,Tr(yx 


+ 
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Note that 

£ £ £?•'’»' = 0 . 

zeGP{p)* xeGP{q) 

The desired eonelusions then follow from Lemmas [8] and [TOl ■ 

B. The proof of Theorems [7] and |2] 

It follows from Lemma that the length n of the eode Co is given by 

f ^ — 1 if m odd, 

n = \D\ = UQ— \ j , N f£;iL')2ni / «ti2 

1 p — 1 — ( — 1)'' 2 ) 2 [p — \)p 2 if m even. 

For eaeh b G GF(^)*, define 

ct = (Tr(Mi), Tr(M 2 ), ..., Tr{bdn)), (7) 

where d\,d 2 , ■■■,dn are the elements of D. The Hamming weight wt(Ci) of Cp is hq —N{b), where hq and 
N{b) were defined before. 

When m is odd, it follows from Lemmas [9] and [H] that 

\ ifTr(Z22)=0, 

wt(Cfc) =no-M^) = I (^_i) |^p'«- 2 +fj(Xr(Z 72 ))(-l)(^)"('^)p'¥^ if Tr(Z 72 ) ^ 0. 

The desired eonelusions of Theorem [T] then follow from Lemma |9] and the fact that wt(cft) > 0 for each 
b e GF(^)L 

When m is even, it follows from Lemmas |9] and [H] that 

( {p-\)p’^-^ ifTr(Z72)=0, 

"'•(Co) I (p_l)L"-2_(_l)(Gf?p=f2f 

The desired conclusions of Theorem [2] then follow from Lemma |9] and the fact that wt(cfo) > 0 for each 
b e GF{qy. 


IV. A GENERALIZATION OF THE CONSTRUCTION 


Let / be a function from a finite abelian group (A, +) to a finite abelian group {B, +). A robust measure 
of nonlinearity of / is defined by 


Pf 


max max 

beB 


\{xeA: f{x + a)-f{x) = b}\ 

\A\ 


The smaller the value of Pf, the higher the corresponding nonlinearity of /. 

It is easily seen that Pf > 0. A function f :A^ B has perfect nonlinearity if Fy = |^. A perfect 

nonlinear function from a finite abelian group to a finite abelian group of the same order is called a 
planar function in finite geometry. Planar functions were introduced by Dembowski and Ostrom in 1968 
for the construction of affine planes ifT^ . We refer to Carlet and Ding 0 for a survey of highly nonlinear 
functions. Coulter and Matthews ifTOll and Ding and Yuan lfT9l for information about planar functions. 

Some known planar functions from GF(^) to GF(^) are the following 0, ifTOll : 

• f{x) = 

• f{x) =xP where m/gcd(m,k) is odd (Dembowski and Ostrom ifT^ l. 

• f{x) =x^~, where p = 3, k is odd, and gcd(m,k) = 1 (Coulter and Matthews IfTOll f. 



• fu{x.) = — ux^ — u^x^, where /> = 3 and m is odd (Coulter and Matthews [fTOl for the ease u — — 

Ding and Yuan [[T^ for the general ease). 

Note that planar funetions over GF(p™) exist for any pair (/?,m) with p being an odd prime number. 

The construetion of the linear code Cd of this paper can be generalized as follows. Let / be a planar 
function from GF(^) to GF(^) such that 

• /( 0 )= 0 ; 

• f{x) = f{—x) for all X G GF(^); and 

• f{ax) = J^f{x) for all a G GF(p) and x G GF(^), where h is some constant. 

Then the set 

Df := {x G GF(^)* : Tr(/(x)) = 0} C GF(^) 

defines a linear code Cof over GF(p). The code Cof may have the same parameters as the code Cd of 
this paper. Magma confirms that this is true for all the four classes of planar functions listed above. But 
it is open whether Cof and Cd have the same parameters and weight distribution for any planar function 
/ satisfying the three conditions above. It would be nice if this open problem can be settled. 

We remark that this construction of linear codes with planar functions here is different from the one 
in lO, as the lengths and dimensions of the codes in the two constructions are different. 

V. Applications of the linear codes in secret sharing schemes 

In this section, we describe and analyse the secret sharing schemes from some of the codes presented 
in this paper. 

A. Secret sharing schemes 

A secret sharing scheme consists of 

• a dealer, and a group IP = {P\,P 2 , ■■■ ,Pi} of i participants; 

• a secret space S', 

• I share spaces S\, Si, ■■■, Sf, 

• a share computing procedure; and 

• a secret recovering procedure. 

The dealer will choose a secret s from the secret space S, and will employ the sharing computing 
procedure to compute a share of the secret s for each participant Pi, and then give the share to Pi. The 
share computed for Pi belongs to the share space Si- When a subset of the participants comes together 
with their shares, they may be able to recover the secret s from their shares with the secret recovering 
procedure. The secret s and the sharing computing function are known only to the dealer, while the secret 
recovering procedure is known to all the participants. 

By an access set we mean a group of participants who can determine the secret from their shares. The 
access structure of a secret sharing scheme is defined to be the set of all access sets. A minimal access 
set is a group of participants who can recover the secret with their shares, but any of its proper subgroups 
cannot do so. A secret sharing scheme is said to have the monotone access structure, if any superset of 
any access set is also an access set. In a secret sharing scheme with the monotone access structure, the 
access structure is totally characterized by its minimal access sets by definition. In this section, we deal 
with secret sharing schemes only with the monotone access structure. 

Secret sharing schemes have applications in banking systems, cryptographic protocols, electronic voting 
systems, and the control of nuclear weapons. In 1979, Shamir and Blakley documented the first secret 
sharing schemes in the literature Q, ETll . 


B. The covering problem of linear codes 

In order to describe the secret sharing scheme of a linear code, we need to introduce the covering 
problem of linear codes. 

The support of a vector c = (cq, .. • G GF(p)” is defined as 

{0 < / < n — 1 : C; 7^ 0}. 

We say that a vector x covers a vector y if the support of x contains that of y as a proper subset. 

A minimal codeword of a linear code is a nonzero codeword that does not cover any other nonzero 
codeword of C- The covering problem of a linear code is to determine all the minimal codewords of C- 
This is a very hard problem in general, but can be solved for certain types of linear codes. 

C. A construction of secret sharing schemes from linear codes 

Any linear code over GF(p) can be employed to construct secret sharing schemes [[I||, DU, [|25l, [|28l . 
Given a linear code G over GF(p) with parameters [n,k,d] and generator matrix G = [go,gi,...,g«-i], we 
use d^ and H = [ho,hi,... ,h„_i] to denote the minimum distance and the generator matrix of its dual 
code C^. 

In the secret sharing scheme based on C, the secret space and the share spaces all are GF(p), and the 
participants are denoted hy P\,P 2 , - ,Pn-i- To compute shares for all the participants. The dealer chooses 
randomly a vector u = {uq, ..., Un-k-\) such that s = uho, which is the inner product of the two vectors. 
The dealer then treats u as an information vector and computes the corresponding codeword 

t={tQdl,...dn^l) = \\H. 

He then gives ti to party Pi as his/her share for each i>\. 

The secret recovering procedure is the following. Note that to = uho = 5. A set of shares , ti,„} 

determines the secret s iff ho is a linear combination of h,j,..., h,^. Suppose that 

m 

ho= ^xjh,-.. 
j=i 

Then the secret s is recovered by computing 

m 

s= Y.Xjtij. 

7=1 

Equivalently, we look for codewords c of the code C with the shape 

(l,0,...,0,c/;,0,...,0,c/,„,0,...,0) 

Hence, the minimal access sets of the secret sharing scheme based on correspond to the minimal 
codewords in C having 1 as their leftmost component. The other nonzero components correspond to the 
participants in the minimal access set. For example, if (1,2,0,0,2) is a codeword of C, then {Fi,F 4 } is 
a minimal access set. To obtain the access structure of the secret sharing scheme based on C^, we need 
to determine all minimal codewords of C. 

Note that the access structure of the secret sharing scheme based on is independent of the choice 
of the generator matrix H of C^. We therefore say that the secret sharing scheme is based on without 
mentioning the matrix H. We would remind the reader that a linear code gives a pair of secret sharing 
schemes. One is based on C and the other is based on C^. Below we consider only the latter due to 
symmetry. 

The access structure of the secret sharing scheme based on a linear code is very complex in general, 
but can be determined in certain special cases. The following theorem is proved in |[T^ . (SOl. 
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Theorem 12. Let C be an [n, k, d] code over GF(/)), and let G = [go, gi, • • •, g^-i] be its generator matrix. 
Let d^ denote the minimum distance of its dual code C^. If each nonzero codeword of C is minimal, 
then in the secret sharing scheme based on C^, the total number of participants is n—\, and there are 
altogether p^~^ minimal access sets. 

• When d^ = 2, the access structure is as follows. 

If gi is a multiple of go, I <i <n— 1, then participant Pi must be in every minimal access set. 

If gi is not a multiple of go, \ <i <n — 1, then participant Pi must be in [p — l)p^~^ out of p^~^ 
minimal access sets. 

• When d^ > 3, for any fixed I <t < 1, — 2} every group of t participants is involved in 

{p — out of p^~^ minimal access sets. 

When the conditions of Theorem [T^ are satisfied, the secret sharing scheme based on the dual code 
is interesting. In the case that d^ = 2, some participants must be in every minimal access sets, and 
thus are dictators. Such a secret sharing scheme may be required in certain applications. In the case that 
d^>3, each participant plays the same role as he/she is involved in the same number of minimal access 
sets. Such a secret sharing scheme is said to be democratic, and may be needed in some other application 
scenarios. 

A question now is how to construct a linear code whose nonzero codewords all are minimal. The 
following lemma provides a guideline in this direction ll2l, ll3l. 

Lemma 13. Every nonzero codeword of a linear code C over GF(p) is minimal, provided that 

Wmin ^ P ^ 

^mcix P 

where Wmax cind w,nin denote the maximum and minimum nonzero weights in C, respectively. 

D. The secret sharing schemes from the codes of this paper 

In this subsection, we consider the secret sharing schemes based on the dual codes and of the 
codes Cd and Q) presented in this paper. 

For the code Cd of Theorem [T] and the code Q) of Corollary [3l we have 

„j_2 , 

Wmin _ P ^-p^ ^ p-\ 

l^max P 

if m > 5. 

Let m = 0 (mod 4) or m = 0 (mod 2) and p=l (mod 4). Then for the code Cd of Theorem |2] and 
the code Qj of Corollary 01 we have 

Wmin _ ^ p_i 

Wmax P'^~'^ P 

if m > 4. 

Let m = 2 (mod 4) and p = I (mod 4). Then for the code Cd of Theorem [2] and the code Cd of 
Corollary 01 we have 

Wmin _ 7?™"^ ^ P~^ 

m—2 

Wmax pin—2 _|_ p 2 p 

if m > 6. 

It then follows from Lemma [T3l that all the nonzero codewords of Cd and Cd are minimal if m > 6. 
Hence, the secret sharing schemes based on the dual codes Cj^ and C^ have the nice access structures 
described in Theorem [T^ 
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As an example, we describe the access structure of the secret sharing scheme based on the dual code 
of the code Cjj of Corollary [3] as follows. 

Corollary 14. Let m> 5. In the secret sharing scheme based on the dual code of the code Cjy of 
Corollary |3l the total number of participants is and the total number of minimal access sets is 

pin-i Every participant is a member of exactly (p— \ )p'^~^ minimal access sets. 

Proof: As proved above, every nonzero codeword of Cp is minimal as m > 5. It can be easily proved 
that d^ >3. The desired conclusions then follow from Theorem \V2[ ■ 

As an example of Corollary [141 we have the following. 

Example 5. Let m = 5 and p = 5. In the secret sharing scheme based on the dual code of the code 
Cf) of Corollary E] the total number of participants is 125, and the total number of minimal access sets 
is 625. Every participant is a member of exactly 500 minimal access sets. 

In the secret sharing scheme of Example [51 the secret space is GF(5), which is too small. However, it 
can still be employed for sharing a secret of any size. This is done as follows. One can have GF(5^^) as 
the extended secret space, where h could be as large as one wants (e.g., h = 60). Then any secret can be 
encoded as a sequence 

5 = S\S2...Sh 

using an encoding scheme, where each Si G GF(5). Then the secret s can be shared by the 125 participants 
symbol by symbol with the secret sharing scheme of Example [51 Hence, the share for each participant 
will be a sequence of elements of GF(5) with length h. When a group of participants come together with 
their shares, the elements Si in the secret s will be recovered one by one using the corresponding elements 
in their shares. 

Finally, we mention that the secret sharing scheme based on the dual code of the code Cq of 
Corollary [H has a similar access structure as the one described in Corollary For the linear codes of 
Theorems m and |2l their dual codes have minimum distance 2. Hence, the secret sharing scheme based on 
the dual code of the code Qj in Theorems [T] and IH have dictators in the whole group of participants. 
Their access structure is given in the first case of Theorem [T^ 

VI. Concluding remarks 

Calderbank and Kantor surveyed two-weight codes in There is a recent survey on three-weight 
cyclic codes [[T4ll . Some interesting two-weight and three-weight codes were presented in [[51, [HTl . [|9l , 
on . Il22l . [l23l . [l26l . [|29l . and llsn . The length of the two-weight and three-weight codes in the literature 
usually divides p'" — 1, while that of the codes presented in this paper does not have this property. We 
did not find the parameters of the two-weight and three-weight codes of this paper in the literature. 

The two-weight codes Cd of this paper give automatically strongly regular graphs having new parameters 
with the connection described in [|6l, and the three-weight codes Cd of this paper may yield association 
schemes having new parameters with the framework introduced in [|51 . The linear codes of this paper can 
be employed to construct authentication codes having new parameters via the framework in [[T3l . [[T71 . 
For this application, we need to know not only the weight distribution of the linear codes, but also the 
distribution of each element of GF(p) in each codeword of the linear code. This is called the complete 
weight distribution of a code. Another advantage of the linear codes in this paper is that their complete 
weight distribution can be settled with the help of Gaussian sums. In the literature the complete weight 
distribution of only a few classes of linear codes is known. 

Compared with other two-weight and three-weight codes, the construction method of the codes in this 
paper is very simple and is defined by the simple function Tr(x^). This makes the analysis of the linear 
codes much easier. 
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